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A compete orthonormal basis of JV-qutrit unitary opera- 
tors drawn from the Pauli Group consists of the identity and 
9^ — 1 traceless operators. The traceless ones partition into 
3 + 1 maximally commuting subsets (MCS's) of 3^ — 1 op- 
erators each, whose joint eigenbases are mutually unbiased. 
We prove that Pauli factor groups of order 3^ are isomor- 
phic to all MCS's, and show how this result applies in specific 
cases. For two qutrits, the 80 traceless operators partition 
into 10 MCS's. We prove that 4 of the corresponding basis 
sets must be separable, while 6 must be totally entangled (and 
Bell- like). For three qutrits, 728 operators partition into 28 
MCS's with less rigid structure allowing for the coexistence 
of separable, partially-entangled, and totally entangled (GHZ- 
like) bases. However a minimum of 16 GHZ-like bases must 
occur. Every basis state is described by an iV-digit trinary 
number consisting of the eigenvalues of N observables con- 
structed from the corresponding MCS. 

PACS numbers: 03.67.-a, 03.65.Ud, 03.65.Wj 

I. INTRODUCTION 

Systems of three-state particles (qutrits) have been 
much under discussion recently because they expand the 
potential for quantum information processing and they 
have been realized and controlled experimentally. Spe- 
cific realizations for use in quantum communication pro- 
tocols include biphotons [1,2], time-bin entangled pho- 
tons [3], and photons with orbital angular momentum 
[4]. Qutrit quantum computation with trapped ions has 
been described theoretically [5], while one-qutrit gates 
have been demonstrated experimentally with deuterons 
[6]. Specific advantages of qutrits over qubits include 
more secure key distributions [7-9], the solution of the 
Byzantine agreement problem [10], and quantum coin 
flipping [11]. 

In this paper we describe the general framework for 
quantum tomography of A-qutrit states provided by mu- 
tually unbiased basis sets [12] and the special opera- 
tors (or measurements) associated with them. As N in- 
creases, these operators retain their fundamental trinary 
character (having three distinct eigenvalues), unlike the 
more familiar operators of compound angular momen- 
tum, for example. This means that the quantum numbers 
specifying the A^-qutrit basis states are A^-digit trinary 
numbers: For separable states, each digit corresponds 
to a statement about a single qutrit. For totally entan- 
gled states in which the entanglement is shared among all 
qutrits, every statement refers to a joint property of two 
or more (perhaps all) qutrits; no statement refers to a 



single qutrit. Such descriptions parallel those introduced 
recently for N qubit systems [13,14]. In this case, the 
descriptions rely on the existence of N commuting tri- 
nary operators. If these are Hermitean, they comprise a 
"complete set of commuting observables" in the familiar 
sense [15] that they define a basis in the Hubert space of 
pure states, whose dimension is 3 . 

But the density matrix p describing mixed states re- 
sides in a vector space of dimension 9 N , together with all 
other operators on the state space. This operator space is 
spanned by a complete and orthonormal set of operators 
(orthonormal in the sense Tr(OjOj) ~ <5y ). Appropriate 
trinary operator "basis sets" are easily constructed as 
tensor products of unitary one-qutrit operators [16,17]. 
This set of 9 N operators partitions into 3^ + 1 maximally 
commuting subsets (MCS's) of 3^ — 1 operators each [17], 
expending all operators in the basis apart from the iden- 
tity. Each of these MCS's contains a smaller subset of 
A" operators that provide the trinary labels for the corre- 
sponding basis states. The 3^ + 1 distinct basis sets thus 
defined are mutually unbiased [17], i.e., the inner prod- 
uct between any two states belonging to different ones 
has the common magnitude, 3~ N ^ 2 . Since measurements 
within each basis set provide 3^ — 1 independent prob- 
abilities, the 3^ + 1 basis sets together provide 9 —1. 
This number is just sufficient to determine the density 
matrix (with Trp =1). 

The partitioning structure described above is guaran- 
teed because 3 is a prime number: Ref. [12] proved that 
if the dimension (d) of a Hilbert space is equal to a power 
of a prime number (like 3^), then a full complement of 
d+1 mutually unbiased basis sets (MUB's) exists. The 
number d + 1 is necessary and sufficient to determine a 
mixed state p with maximum efficiency [12]. Ref. [17] 
proved that d+1 MUB's exist if and only if a parti- 
tioning, complete and orthonormal operator set exists, 
and showed how to construct such operator sets from 
Pauli operators. These operators identify the measure- 
ments associated with each MUB. It is worth mentioning 
that while MUB's are desireable for quantum tomogra- 
phy generally, they have proven instrumental in certain 
proposed quantum key distributions [18], and in the so- 
lution of the Mean King's Problem for prime power di- 
mensions [19]. The last example is a problem in quantum 
state determination is which both the choice of measure- 
ment (the basis set), and its outcome (the state within 
the basis set), are to be determined. 

It should be noted in this connection that the parti- 
tioning property of an operator set is not guaranteed by 
completeness and orthonormality. A good counterexam- 
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pic in the onc-qutrit case is the conventional set of gen- 
erators of SU(3), Ai, As [20]. This set is orthonormal 
(TrAiAj = 2Sij), and complete (with the inclusion of the 
identity), but it does not partition into four subsets of 
two commuting operators each. So the Xj operators pro- 
vide a basis for quantum tomography [21], but not one 
associated with mutually unbiased basis sets. In Sec. 
II we shall construct Hermitean operator basis sets that 
have two desireable properties: They partition so as to 
define MUB's, and they generate SU(3) [or SU(3 N ) in 
the general case]. 

We are interested here in the discrete group proper- 
ties of the unitary basis operators themselves. The N 
operators that define basis states also generate, by mul- 
tiplication, all remaining operators in the MCS, plus the 
identity, thus forming a group of order 3^. The full oper- 
ator basis consisting of all MCS's plus the identity (one 
copy), totalling 9 N operators, does not form a group, 
but only because multiplication between operators from 
different MCS's generates one of the three phase factors, 
cxp(2ri7ri/3). Thus, a group of order 3-9^ (which we shall 
call the Pauli Group of N qutrits) consists of the operator 
basis in triplicate, i.e., each operator multiplied by each 
phase factor [16]. Its factor groups relate closely to the 
partitioning structure. Those of order 3 N are most useful 
because they are isomorphic to all of the MCS groups. 

In the next three sections we discuss the one, two, 
and three qutrit cases to illustrate the general princi- 
ples outlined above, and also to highlight special prop- 
erties that emerge in each case. The one-qutrit section 
describes the Pauli Group and illustrates its connection 
with the (unique) partitioning of the eight-operator basis 
set. The two-qutrit section describes the mutually unbi- 
ased bases sets, separable and totally entangled, and the 
corresponding operator sets. While many partitions ex- 
ist, we prove that their structure is unique. The three 
qutrit section describes three types of mutually unbiased 
basis sets. We derive the allowed partitioning structures 
and the coexistence conditions for the three types. The 
concluding section summarizes the results and interprets 
the trinary descriptions of separable and entangled states 
in terms of complementarity between individual and joint 
properties of many-particle systems. Two brief appen- 
dices supply background material for reference as desired 
while reading the text. Appendix A reviews the connec- 
tion between mutually unbiased bases and the partition- 
ing of an operator set. Appendix B proves a new theorem 
that describes the general relationship between such op- 
erator partitionings and Pauli factor groups. 

II. ONE QUTRIT 

For comparison, recall briefly the Pauli operators for a 
single qubit, written in outer product notation [22] as 

Z=\n)(-l) n {n\, 
X = \n + l)(n\, 



Y = XZ=\n + l)(-l) n (n\, (1) 

where summation is implied over the values n = 0, 1 
(for spin up and down along z), and addition is mod- 
ulo 2 so that the second equation, for example, reads 
X = |1)(0| + |0)(1|. The four operators 7, X, Y, Z form 
a complete orthonormal set of operators on the one-qubit 
Hilbert space. The eigenbases of A, Y, and Z are mutu- 
ally unbiased: An eigenstate of Z has equal probabilities 
of being found in any eigenstate of X or Y. The eight op- 
erators ±Z, ±A, ±y, and ±1 form the Pauli Group [16] 
of a qubit. A larger Pauli Group is sometimes defined as 
well [23], one which includes the Hermitean counterpart 
iY [Z and X being hermitean as they stand). This group 
consists of the sixteen elements (±Z, ±iZ, ...). The more 
exclusive former definition conforms to the general one 
that applies to qutrits. 

While the operators defined above are all square roots 
of the identity I (2 x 2), the corresponding operators for 
the qutrit case are all cube roots of I (3 x 3). We may 
write the complete orthonormal set as I, V, X, Y, Z, 
V 2 , A 2 , Y 2 , and Z 2 , since each element has a square, 
which is also its inverse. We may define in analogy with 
the above, following Refs. [16,17,22], 

Z=\n)u n (n\, 
X = \n + l)(n\, 
Y = XZ =\n+l)uj n (n\, 

V = XZ 2 = \n + l)u 2n (n\, (2) 

where summation is implied over the values n = 0, 1, 2, 
(corresponding to spin projections 0, +1, —1 respec- 
tively), addition is modulo 3, and 

uj = exp(27n/3). (3) 

Each of the four operators in Eq. (2) defines, as its eigen- 
basis, one of the four required mutually unbiased basis 
sets [24], and each operator, together with its square, 
forms a maximally commuting subset (MCS). 

To facilitate writing the multiplication rules among 
these operators, we introduce a concise notation reflect- 
ing their actions upon the eigenstates of Z (the standard 
basis): "diagonal" (I, Z, Z 2 ), "right cyclic" (A, Y, V), 
and "left cyclic" (A 2 , Y 2 , V 2 ). Then, letting the index 
I = 0, 1, 2 denote the operator within each grouping, 

Ei =Z l = \n)u nl (n\, 

Ri =XZ l = \n + l)u nl (n\, 

Li =R\ = \n)uj- nl (n + l\. (4) 

One can also think loosely of Ri as "raising" and L\ as 
"lowering" operators with respect to the standard basis, 
but the "cyclic" designations are more descriptive [25]: 
Ri and Li are norm-preserving, whereas the usual angu- 
lar momentum raising and lowering operators annihilate 
the uppermost and lowermost rungs of the ladder, re- 
spectively. The multiplication rules may be constructed 
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immediately. For conciseness, nine expressions are con- 
densed into six by writing the last six in the form of 
commutators: 

EiE m — Ei +m 

RiRm = u m 1 L-i-m 
LiL m = lo 171 R-i- m 

[Ri,E m ] = (1 — uj" 1 ) Ri+ m 
[Li,E m ] = (uj m — 1) Li- m 
[Ri,L m ] = (L0 m ~ l - 1) E x _ m . (5) 

It is apparent from this multiplication table that every 
one of the eight operators, Z,...,V 2 , commutes only with 
itself, its square, and the identity. Consider for example 
Ri\ It commutes with R m only if m = I, with L m only if 
m = I (since L m is then its square), and with E m only if 
m = 0. It is also apparent that the lack of commutativity 
resides entirely in the phase factors. 

These phase factors spoil the property of closure under 
multiplication and prevent these 9 operators, by them- 
selves, from forming a group. But, as mentioned, a group 
of order 27 (the Pauli Group of a qutrit) is formed by 
taking the nine basis operators in triplicate, i.e., each 
operator multiplied by 1, lo, and lo 2 . 

This Pauli Group has a trivial factor group of order 
9, whose elements consist of the triples X = (I,loI,co 2 I), 
Z = (Z,loZ,lo 2 Z),..., V 2 = (V 2 ,loV 2 ,lo 2 V 2 ). The multi- 
plication ZX = y means that the product of any element 
of Z with any element of X is equal to some element of 
y. This group is abelian because no factors of w" appear 
in its multiplication table. 

Factor groups of order 3 are more interesting. One 
example is apparent from Eqs. (5). The factor group 
elements, each consisting of nine Pauli Group elements, 
may be denoted by 

£=u n Ei = (I,Z,Z 2 ) 

K = uj n R l = (x,y,v) 

£ = uo n L l = (X 2 ,y 2 ,V 2 ), (6) 

where n = 0,1,2, and I = 0,1,2. The multiplication 
table consists of 

TZ 2 = £, C 2 = TZ, TZ£ = £TZ = £ (7) 

and obvious equalities involving £. This group is, of 
course, isomorphic to the group (l,w, lo 2 ). Equations 6 
provide a useful summary of the relationship between the 
27 Pauli Group elements, the factor group of order 9, and 
the factor group of order 3. 

There is a useful relationship between the last fac- 
tor group and the partitioning structure. Any of the 
four MCS's may be combined with the identity to form 
a subgroup of the Pauli Group. In Table I, we pick 
(I,Z,Z 2 ). We define this, in triplicate, as the identity 
element £ = {I, Z, Z 2 ) of the factor group. The columns 
below (in triplicate) form the elements TZ and C. 
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TABLE I. The partitioning of 8 one-qutrit operators into 4 
maximally commuting subsets. If all entries are multiplied by 
1, lo and lo 2 , then the top line, including /, forms the identity 
element £ of the factor group (Eq. 6), while the first and 
second columns (below the line) form the TZ and £ elements, 
respectively. 

The first entry in each column generates all remaining 
entries by multiplication with elements of £, i.e., X£ = TZ 
and X 2 £ = C. There are four such factorizations corre- 
sponding to the four choices of £. A second example is 

£ = {X, X, X 2 ) 
TZ=(V,y\Z 2 ) 

£=(V 2 ,y,Z). (8) 

Table I and its four variations illustrate that (i) these fac- 
tor groups are isomorphic to all of the subgroups formed 
by the MCS's, and (ii) every factor group element (apart 
from the identity) contains one and only one operator 
from every remaining MCS. We prove these two points 
in Appendix B for the general case of N qutrits, and 
apply them in later sections. 

It is instructive to compare the order-three qutrit fac- 
tor groups with their qubit counterparts, which are of 
order two. The identity element in the qubit case could 
be £ — (±I,±Z), with the other element (the "flip" ele- 
ment, say) being T = (±Y, ±Y). Permutations of X, Y, 
and Z produce the other factor groups of order 2. 

Let us turn finally to the observables. Since the eight 
unitary operators U = Z,...,V and f/t = Z 2 , V 2 form 
(together with the identity) a complete orthonormal set, 
we can immediately construct an alternative Hcrmitean 
basis through the transformation 

H = (U- U*)/iV3, (9) 
H= (U + U r )/V3. (10) 

The four operators of the type H have the trinary spec- 
trum (0, ±1), and the four others, H, have the spectrum 
(2,-l,-l)/\/3. The relationship between each H and its 
compatible partner H is 

H = (2I-3H 2 )/V3. (11) 

The orthonormality relation among all eight is 

Tr(H t H 3 ) = 2%, (12) 
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where indices run from 1,...8, with (say) odd values cor- 
responding to H and even to H. The properties of or- 
thonormality and tracelessness in fact require that com- 
patible Hermitean partners have different spectra. One 
can then see that the standard generators Aj of SU(3) 
fail to partition, because seven have the spectrum (±1,0) 
and one has (1,1, —2) /V3- The Hi operators defined 
here divide equally among these two spectra, and it will 
be clear that the equal division generalizes to iV qutrits. 
The 9^ — 1 partitioning Hermitean operators provide an 
optimally symmetrical set of generators of SU(3 N ). 

In the one-qutrit case, the four trinary iJ-operators 
play a special role: They define the four mutually unbi- 
ased basis sets completely, they generate their partners 
H through Eq. 11, and they generate all eight unitary 
operators through 

U = cxp(2iriH/3), C/ f = cxp(-2niH/3). (13) 

To verify that Eqs. 13 are equivalent to Eqs. 9 and 10, 
we expand the exponential noting that all odd powers of 
H are equal to H itself, and all even powers are equal to 
H 2 : 

U = I+ i ^H-\H\ (14) 

Equation 11 then shows that U and W are equal to (H ± 
iH)V3/2, which is the inverse of Eqs. 9 and 10. 

III. TWO QUTRITS 

A complete orthonormal set of operators on the two- 
qutrit Hilbert space is provided by the 81 tensor prod- 
ucts of the form (/, Z, V 2 )i <g> (I, Z, V 2 ) 2 - Hence- 
forth, in most expressions we shall drop both the ® sym- 
bol and the subscripts referring to the individual qutrits, 
so that expressions like ZX or Y 2 V or IZ will be un- 
derstood as tensor products. These operators have the 
following properties in common with their one-qutrit fac- 
tors: Each generates a cyclic subgroup of order 3, namely 
(II, PQ, (PQ) 2 ), with (PQ) 3 = II, and each has the tri- 
nary spectrum (1,lo,lu 2 ). The product of any two opera- 
tors is equal to a single operator multiplied by u n , so that 
the Pauli Group of two qutrits has order 81 x 3 = 243. 
Each of these properties follows from the fact that opera- 
tors on one qutrit commute with operators on the other. 

Clearly there is a factor group of order 81, each of 
whose elements consists of a basis operator in triplicate. 
But there are more interesting factor groups of order 9, 
for example (£ , TZ, C) £g> (£, TZ, C), which relate to the par- 
titioning of the basis operators. 

The basis operators partition into 10 MCS's of 8 op- 
erators each. One such partitioning and the associated 
MUB's were presented in Ref. [19]. We show another 
(similar) partitioning in Table II together with a related 
factor group. The factor group is defined by choosing 
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TABLE II. A partitioning of 80 two-qutrit operators into 
10 maximally commuting subsets, each consisting of 8 ele- 
ments. Factor group elements are identified at the bottom: 
The identity element consists of operators in the top row (each 
"in triplicate"), and remaining elements correspond to the 
columns directly above them (in triplicate). 

its identity element ££ to be the first row in triplicate, 
i.e., £ = (T,Z,Z 2 ) for both qutrits. All other elements 
are identified in the bottom row, and these consist of the 
9 entries in the columns directly above, all in triplicate. 
Each such element is generated by a multiplication such 
as £n = IX ■ ££. While the factor group is determined 
uniquely once its ££ element is specified, there are sev- 
eral ways in which the elements can be arranged within 
each column so that every row is a maximally commut- 
ing subset, and consequently, all eigenbases are mutually 
unbiased. However, these special arrangements are not 
likely to occur automatically, because only 12 out of the 
(9!) 7 possible arrangements within this particular factor- 
ization result in commuting subsets. The theorem of Ref. 
[17] proves that a partition exists, and our Appendix B 
proves that it conforms to the structure of a factor group 
as illustrated in Table II. This structure is useful in de- 
termining all possible partitions, of which there arc 48. 
Before embarking on this task, however, it will be useful 
to discuss and classify the basis sets resulting from Table 
II. 

A. Mutually Unbiased Basis Sets 

A "complete set of commuting" operators consists of 
any two operators in a given row that are not squares 
of one another. We shall refer to such operator pairs 
as generators because, in addition to providing the two 
independent quantum numbers needed to specify the nine 
basis states, they generate the group consisting of the 
remaining operators in their row and the identity. 

We may choose the first and third entries in each row 
as the generators. Then, because those of the top four 
rows are all one-qutrit operators, the corresponding bases 
must be separable. The first-row basis states are written 
\n,m) zz , the indices (n,m) being two-digit trinary num- 
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bers that specify the eigenvalues (uj n ,ui m ) of the onc- 
qutrit factors in the subscript, Z\ and Z 2 . Second- row 
states are written \n,m) xx , denoting products of eigen- 
states of Xi and X 2 , and similarly in rows three and four. 
The full basis sets are denoted by S{Z, Z), S(X, X), and 
so forth ("S" for separable). 

Generators in all remaining rows (5 — 10) are char- 
acterized by the failure of commutativity between their 
individual onc-qutrit factors. As in the case of two qabits 
[14], the joint eigenstates of such operator pairs must be 
totally entangled. Focusing on the fifth row, we look for 
joint eigenstates of ZX and VZ. Let us first write the 
most general form of eigenstates of ZX as expansions in 
separable states \n, m) zx belonging to S(Z, X): 

|* > = (o|0,0) + 6|l,2) + c|2,l)) iit 
|*i) = (d|l,0) + e|2,2) + /|0,l)) zit 
|*2) = ( 5 |2,0> + /i|0,2) + fc|l,l) ) zx , (15) 

where the subscripts of denote the eigenvalues of ZX 
(namely 1, uj, and u> 2 , respectively) and the coefficients 
a, ...,k are arbitrary. The coefficients are then fixed by 
requiring that the general states above also be eigenstates 
of VZ. There are three choices of coefficients in each ex- 
pression, corresponding to the three eigenvalues of VZ. 
The salient feature is that the coefficients have equal am- 
plitudes, their relative phases being integral powers of uj. 
The physical interpretation of this is that while ZX takes 
a definite value, its factors Z and X are maximally ran- 
dom. That is, the sum of the two indices (the subscript 
of *f> n ) is fixed, while each index by itself takes all three 
of its possible values with equal probabilities. With this 
in mind, we can write all nine row-5 basis states in the 
form 

I 2 

\n,m) B (zx,vz) = y2C nmk \k,n- k) zx , (16) 
^ 3 k=0 

where C\ mk = 1. The subscript on the left side, 
B(ZX,VZ), refers to the entangled basis set ("B" for 
Bell- like). The individual states within this set are de- 
noted by the two-digit trinary number {n, m) specifying 
the two eigenvalues {w n , u m ) of the operators {ZX, VZ), 
respectively. The indices {n, m) themselves are just the 
eigenvalues of the trinary Hermitean counterparts defined 
by Eq. 9; for example, 

H{ZX) = {ZX - Z 2 X 2 )/i\f?>. (17) 

So, restating the physical interpretation in terms of ob- 
servables, the eigenvalue (n) of H{ZX) is the sum, mod- 
ulo 3, of the eigenvalues of H{Z\) and H{X 2 ) {k and 
n — k, respectively), the sum being definite while the 
summands are random. 

The randomness applies not just to the one-qutrit fac- 
tors in the two generators as shown above, but to all one- 
qutrit operators. This follows most dramatically from the 



stunning appearance of all 16 one-qutrit factors in every 
maximally commuting subset in rows 5-10! So any one- 
qutrit factor may appear in a generator and the above 
arguments apply. A concise general proof will be given 
in the following subsection. 

Rows 8 - 10 of Table II define states that differ subtly 
from those of rows 5-7. Consider the generators Z 2 X 
and YZ 2 of row 8. The Hermitean counterpart of either 
of these, for example 

H{Z 2 X) = {Z 2 X - ZX 2 )/iV3, (18) 

refers to differences, not sums of individual qutrit indices: 
If joint eigenstates of Z 2 X and YZ 2 are expanded in the 
same product basis S{Z,X) used for Eq. 16, the result 
takes the form 

! 1 

\n,m) B (z 2 x,yz 2 ) = -/= Dnmk\k,n + k) zx , (19) 

V d fc=_l 

showing that the eigenvalue (n) of H{Z 2 X) is the dif- 
ference between eigenvalues of H{X 2 ) and H{Z\). Of 
course one may choose different operators to label the 
states, and in row 8 there is one choice, XV, that refers 
to sums, while the other three independent choices refer 
to differences. Rows 8-10 share the preference for dif- 
ferences, while rows 5-7 share the preference for sums. 
These balanced asymmetries can be interchanged but not 
removed by renaming the operators, and they appear to 
be inevitable. 

In all the above examples, basis states have been writ- 
ten in "minimal" form, i.e., three-term expansions for 
entangled states, and single terms (by definition) for sep- 
arable states. This requires a special choice of "quanti- 
zation axes" for both qutrits, a choice that is unique for 
S states although not for B states. It is interesting to 
note that if one instead expands all MUB states in the 
standard basis, S{Z, Z), then all those outside of S{Z, Z) 
have nine-term expansions, of necessity. A full comple- 
ment of MUB's was written out explicitly in this manner 
for solving the Mean King's problem in 9 dimensions [19]. 

B. The 4S - 6B Theorem 

We now address the problem of enumerating all par- 
titions of the operator set, and of proving that all have 
the same structure, producing exactly 4 separable and 6 
totally entangled basis sets. We begin by proving that 
there must be exactly 4 separable bases. Consider any 
operator having an identity factor, say PI. The most 
general MCS to which it may belong is generated by it- 
self and any operator that commutes with it, apart from a 
power of itself. Such an operator must take the form IQ, 
leading to the MCS (77, PI, P 2 I) <g> {II, IQ, IQ 2 ) - II, 
where Q may be any of V, X, Y, or Z, squares being re- 
dundant. This subset, or its two generators, define the 
separable basis set S{PQ). Since there are four operators 
of the type PI to begin with, and since each must belong 
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to a MCS containing a distinct IQ operator, we conclude 

1) that there are four MCS's of this type, and 2) there 
are 24 distinct choices of these four subsets. Correspond- 
ingly, there are four separable, mutually unbiased basis 
sets, and 24 distinct choices for this quartet. The dis- 
tinction is simply one of renaming the basis states of one 
qutrit while keeping those of the other qutrit fixed. Wc 
may therefore conclude from the specific example shown 
in Table II that the remaining six basis sets are totally 
entangled. It is instructive, however, to prove this result 
in more general terms. 

Since the required separable bases exhaust all oper- 
ators containing an identity factor, it suffices to show 
that any MCS lacking such operators must produce a to- 
tally entangled basis set. We make use of Eq. 34 of Ap- 
pendix A, which expresses the projection operator P^ of 
any state a belonging to the basis A in terms of all the 
corresponding operators, t/j 4 , U£_ v and the identity 
I = Uj. The coefficients e* aa all have unit amplitude, and 
in particular, Eda = 1- The overall factor of dr 1 = 1/9 
guarantees that Tr P^ = 1. The reduced density matrix 
of either qutrit is the partial trace of P^ over the states 
of the other. The partial trace vanishes for all operators 
with o = l, ...,d— 1 because no identity factors appear, 
leaving only a = d: 

Pi = Tv 2 P£ = ^Tr 2 I=^h, (20) 

where I\ is the identity operator on qutrit 1. Similarly, 
P2 = showing that the pure state P^ is totally 

entangled. This proves that all six remaining MCS's give 
rise to totally entangled basis sets. 

It is interesting to note that the absence of identity fac- 
tors in a MCS implies two other points encountered ear- 
lier: 1) All one-qutrit operators must appear as factors. 
To prove this, assume that they do not. Then at least one 
such factor would have to appear twice, producing a pair 
such as PQ and PR. But these are distinct and commute 
only if R = Q 2 , in which case their product {P 2 I) con- 
tains a single identity factor, producing a contradiction. 

2) No two generators of such a MCS may have compati- 
ble one-qutrit factors. This follows from point (1), noting 
that PQ and P 2 Q 2 appear in the same MCS but cannot 
be generators. 

C. The final count - 48 partitions 

Having counted 24 choices for the four separable basis 
sets, we ask finally how many choices remain for parti- 
tioning the complete operator set. It suffices to begin 
with the specific choices of rows 1 - 4 as written in Table 
II, since all others correspond to relabeling the operators 
on the second qutrit. To count the remaining options for 
partitioning the operators in rows 5 - 10, we count the 
ways to rearrange operators in the third column, keep- 
ing those of the first column fixed, in such a way that 
these pairs generate compatible rows that do not over- 
lap with any other rows. (This simplification rests on 



the factor group theorem of Appendix B.) Consider ZX 
from the first column. It commutes with VZ, XZ, YZ, 
and no others from the third column. The first and 
third choices are viable, while the second must be ruled 
out because it generates YY, which already appears in 
the third row. Given either viable choice, there remains 
only one choice for partners of ZY and ZV that does 
not reproduce an operator already existing in some row 
above. Moving to the last three rows, Z 2 X commutes 
with YZ 2 , VZ 2 ,XZ 2 , and no others from the third col- 
umn. Given our choice for the fifth row, only the first 
choice is viable: V Z 2 is ruled out because it generates 
YV, which already appears in the sixth row, and XZ 2 is 
ruled out because it generates V V which is found in the 
fourth row. Therefore, in total, only two choices exist for 
the last six rows given the first four rows. The choice not 
shown here appears in Table V of Ref. [19]. With 24 op- 
tions available for the first four rows, there are 48 distinct 
partitions of the full operator set. Only the last choice, 
involving just the totally entangled basis sets, does not 
correspond to a simple relabeling of one-qutrit states. 

IV. THREE QUTRITS 

There are 9 3 = 729 tensor product operators such as 
VZX 2 , Y 2 IX, ZII, etc., that comprise a complete or- 
thonormal set. As before, each generates a cyclic sub- 
group of order 3 and has the trinary spectrum. The 
product of any two is a single operator times u> n , so that 
the Pauli group has order 3 x 9 3 = 2187. The more 
interesting factor groups are of order 27, for example 
(£,7\L,£)® 3 ; these relate to the partitioning of the ba- 
sis operator set into 3 3 + 1 = 28 maximally commuting 
subsets of 3 3 — 1 = 26 operators each. The new aspect 
that emerges with N = 3 is that different partitioning 
structures are possible. For example, if the number of 
separable basis sets is maximized at 4, then all remain- 
ing 24 basis sets are totally entangled. However, one may 
choose fewer than 4 separable bases, requiring that some 
others have partial entanglement. Let us begin by illus- 
trating the three types of basis sets and corresponding 
MCS's that can occur. We shall then determine the par- 
titioning structures that are possible, without attempting 
to count the actual number of each type. 

Product bases may be denoted by S(PQR), where 
P is any of V, X, Y, or Z, etc. These are eigenbases 
of the one-qutrit operators PII, IQI, and II R, which 
generate the maximally-commuting subsets (I, P, P 2 ) ® 
(I,Q,Q 2 ) ® (I,R,R 2 ). As with two qutrits, there are 
only four (nonrcdundant) choices for P, and therefore at 
most four such subsets, with four corresponding product 
bases. As before, of course, there are many choices for 
these quartets. 

Totally entangled basis sets in which the entanglement 
is shared equally among all three qutrits (analogous to 
three-qubit GHZ basis sets [14]) arise from MCS's simi- 
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XXX 


YYY 


vvv 




XYV 


YVX 


VXY 




XVY 


YXV 


VYX 




Z 2 ZI 


Z 2 IZ 


IZ 2 Z 


zzz 



TABLE III. These thirteen three-qutrit operators and their 
squares form a maximally commuting subset whose eigenbasis 
consists of totally entangled three-qutrit GHZ states. 

lar to the example shown in Table III. ("Similar" moans 
"same number if I factors.") We show half of the opera- 
tors which, together with their squares, comprise the full 
MCS of 26. Each row, together with its squares, forms a 
subgroup when combined with ZZZ, its square and the 
identity. The three generators of the full MCS may be 
any three operators that do not belong to the same sub- 
group. The operators in the last row are notable because 
they (and their squares) are diagonal in the separable ba- 
sis S(ZZZ). The first three operators specify differences 
between two one-qutrit indices, and the fourth operator 
specifies the sum of all three. A simultaneous eigenstate 
(with the sum and all differences equal to zero, for ex- 
ample) is 

|*) = (o|000) + 6|111) + c|222)) zm , (21) 

where the subscript indicates separable states, and the 
coefficients a, b, and c are arbitrary. There are nine ex- 
pressions of the form of Eq. 21 which are simultaneous 
eigenstates of fourth-row operators, each being a super- 
position (k = 0, 1, 2) of separable states \k,n + k,l + k) zzz 
with arbitrary coefficients. The fourth-row operators (or 
more precisely, their Hermitean counterparts H), have 
eigenvalues n, I, (I — n), and (l + n), respectively, which 
reflects the fact that only two of them are independent. 
In order to fix the coefficients in the nine expressions and 
extract the 27 simultaneous eigenstates of all operators 
in Table III, we require that these expressions be eigen- 
states of a third independent operator, say XXX. Wc 
may write the 27 basis states in analogy with Eq. 16 as 

! 2 

\n,l,m) G = —, = VC„ imfc |fc,n + k,l + k) zzz , (22) 

where |C„( m fc| = 1, the subscript G identifies the en- 
tangled basis set G(Z 2 ZI, Z 2 IZ, XXX), and n, I and 
m are the eigenvalues of (the Hermitean counterparts 
of) the three operators listed, respectively. For example, 
H(XXX) = [XXX - (XXXY]/iV3 -» m. 

The presence of the operator XXX in this list might 
suggest the alternative separable basis set S(XXX) for 
the expansion of the \n,l, m)c states. However, such ex- 
pansions would require sums of nine terms, not three. 
The basis S(ZZZ) is special in reducing the expansion to 
its "simplest" form. This situation is analogous to that of 



three-qubit GHZ states, where the "simplest" form con- 
sists of two-term expansions in separable states. There 
too the simplification depends on a special choice of quan- 
tization axes for the individual qubits, other choices re- 
quiring four- or eight-term expansions. 

The "three-qutrit GHZ" states, like their three-qubit 
counterparts, share the property that all one-particle re- 
duced density matrices are proportional to the identity. 
The proof of this fact again follows directly from the op- 
erators themselves: We expand the projection operator 
P£ of any such basis state in terms of the MCS opera- 
tors using Eq. 34 of Appendix A. Since no operator in the 
expansion has more than a single identity factor (apart 
from the III I'll term), the partial trace of over any 
two qutrits is proportional to the identity on the other, 
for example: 

Pi = T±2fiP£ = ^T±2fiI=\h. (23) 

There are subtle differences among 3-qutrit G bases 
analogous to those occuring in 2-qutrit B bases, in which 
the expansion of Eq. 22 takes slightly different forms. For 
example, suppose that all operators on the third qutrit 
are interchanged with their squares in Table III. Then 
sums and differences are interchanged wherever the third 
qutrit is involved, and the expansion in the same separa- 
ble basis S(ZZZ) takes the form 

1 2 

\n,l,m} G ' = —7= ^V]D n i mk \k,n + k,-l- k) zzz , (24) 
^ 3 to 

where G' refers to G(Z 2 ZI , Z 2 I Z 2 , XXX 2 ), and m is 
the eigenvalue of H(XXX 2 ), etc. Clearly there are four 
distinct expansions of the type seen in Eqs. 22 and 24, 
corresponding to the four ways of distributing (— ) signs 
among the k's. 

The Aharonov state \A) that is used in the solution 
of the Byzantine agreement problem [10] is the (unique) 
spin singlet state of three qutrits. It is the superposition 
of all six permutations of 0, 1, and 2 among the three 
qutrits, with coefficients (l/\/6) for even permutations 
and (— 1/V6) for odd. Thus, it is the superposition of 
two states of the form of Eq. 22, 

|-4} = ^(|1,2,1> g -|2,1,1>g) (25) 

where the third entry in the kets is the eigenvalue of 
XXX, which is a cyclic permutation operator, and the 
first two entries distinguish even and odd permutations. 

Let us finally illustrate MCS types that produce ba- 
sis sets of mixed entanglement, in which one particle is 
uncntangled while the other two are maximally entan- 
gled in the Bell-like states of the previous section. One 
such subset that singles out the first particle is gener- 
ated by ZII,IZX, and IYZ. The corresponding basis 
set can be denoted by SB[Zi; {ZX,YZ)2,z}, which indi- 
cates products of ^-states for particle 1 with Bell states 
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V. CONCLUDING SUMMARY 



operators 


1-body 


2-body 


3-body 


total numbers 


24 


192 


512 


one S basis 


6 


12 


8 


one SB basis 


2 


8 


16 


one G basis 





6 


20 



TABLE IV. The distribution of operators within the three 
types of maximally commuting subsets: separable (S), par- 
tially entangled (SB), and totally entangled (G). These pro- 
files determine which partitioning structures are possible. 



for particles 2 and 3. States within this basis set can be 
expanded using the coefficients defined in Eq. 16: 

1 2 

\n,l,m) SB = — y2Ci mk \n,k,l - k) zzx , (26) 
^ 3 k=o 

where the subscript SB is short for SB[Zi; (ZX, YZ) 2 , 3 ]. 
Here the first index does not vary in the sum; in other 
basis sets such as SB[Z 2 ; (ZX, YZ)i^} the second would 
be held constant. A maximum of 12 such basis sets can be 
mutually unbiased: Any qutrit can be singled out to be 
unentangled, and in each case four basis sets are possible 
(V,X,Y, or Z). In a partition where this maximum is 
realized, the remaining 16 basis sets must all be of the 
GHZ (G) type. 

To understand the range of partitioning structures, we 
classify the 728 operators as one-body (two identity fac- 
tors), two-body (one identity factor), and three-body (no 
identity factors) . The total number of each type is given 
in Table IV, and compared with the numbers that occur 
within each type of MCS. This table shows that there 
can never be more than 4 mutually unbiased separable 
bases, since this would require more than the existing 24 
one-body operators. Similarly, there can never by more 
than 12 partially entangled bases. More generally, the 
numbers of each type that may coexist within any parti- 
tioning structure must satisfy the relations 

N(G) = 16 + 2N(S) 
N(SB) = 12 - 3N(S), (27) 

where N(S) — 0,1, ...4 is the number of separable bases. 
The number of partially entangled (SB) bases may be 
- 12 in steps of 3, and the number of GHZ bases may 
range from 16 - 24 in steps of 2. Equations 27 require 
that no other MCS types exist, and one can easily verify 
that this is indeed the case [26] . Similar coexistence con- 
ditions exist for the three qubit case, where analogous 
types of mutually unbiased basis sets occur. However, 
the new and surprising aspect of the present results is 
the existence of a minimum number of GHZ bases. 



The foregoing three sections illustrate how factoriza- 
tions of the Pauli Group relate to operator partitions, 
and hence to mutually unbiased basis sets. The factor 
groups of order 3 N , for example (£, 1Z, £)® N , are isomor- 
phic to every maximally commuting subset (MCS) in the 
partition. Every MCS has N generators, which provide 
the necessary quantum numbers to label the associated 
basis states by AT-digit trinary numbers. The Hermitcan 
counterparts of these generators form the "complete sets 
of commuting observables." The 3^ + 1 distinct sets are 
mutually unbiased: Any state for which one set takes 
definite values produces perfectly random outcomes for 
all other sets. This statement applies equally well to the 
foil MCS's. 

New aspects emerge as one proceeds to larger numbers 
of qutrits. In the case of a single qutrit there is a unique 
partitioning of the eight operators into four MCS's. 

In the case of two qutrits, there are 48 distinct parti- 
tionings, but they all have the same structure, produc- 
ing four separable bases and six totally entangled (Bell- 
like) bases. Each of the 10 MCS's has two generators, so 
that all quantum numbers are two-digit trinary numbers. 
Those associated with the Bell-like basis states refer ex- 
clusively to sums or differences of particular one-qutrit 
attributes, and in doing so they impose perfect random- 
ness on all one-qutrit attributes. 

The three qutrit case exhibits distinct partitioning 
structures, allowing for the coexistence of three different 
types of basis sets according to Eqs. 27: The GHZ-like 
states are defined by three-digit trinary numbers, each 
digit referring to sums or differences of two or three one- 
qutrit attributes. At least one digit must refer to all three 
qutrits, as is seen from the generators. All one-qutrit at- 
tributes are perfectly random in the GHZ-like states. 

The latter two cases illustrate a sort of complementar- 
ity between individual and joint properties of a system of 
particles. This complementarity is expressed through op- 
erator sets rather than individual operators, and in gen- 
eral all N generators are required : With N = 3, suppose 
we choose two generators, Z 2 ZI and Z 2 IZ, from Table 
III. A third choice XXX produces a GHZ basis, while 
the alternative choice ZII produces a separable basis. In 
the latter case, XXX is random while in the former, ZII 
is random (since every operator outside the MCS of the 
generators is random. In this sense the concept of un- 
biasedness of operator sets incorporates aspects of both 
complementarity and contcxtuality. The compatibility of 
two operators does not rest on their commutativity alone, 
but on the choice of other operators to be measured. 
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Appendix A 

In this appendix we review a general theorem proven 
in Ref. [17]: A full complement of mutually unbiased 
basis sets exists if and only if a partitioning, complete 
and orthonormal set of operators exists. We follow the 
notation of a similar proof given specifically for iV-qubit 
systems in Ref. [14]. 

First, suppose that a full complement of d+ 1 mutually 
unbiased basis sets exists in a Hilbert space of dimension 
d. In terms of projection operators = \A, a) (A, a\, 
where A = 1, d + 1 denotes the basis and a = 1, d 
the state within it, the orthonormality of each basis is 
expressed by 

Tr{P£p£) = 6 a p, (28) 

and the unbiascdness of different bases (A ^ B) by 

Tr(P*pZ) = d-\ (29) 

Corresponding to each basis set, we may define a max- 
imally commuting set of unitary operators, U^, where 
a = l,...,d, including the identity, / = U£, by their 
spectral representations 

U* = j^e aoi P*. (30) 

a=l 

Unitarity of requires that |e aQ | = 1, and U£ = I 
requires Sd a = 1- We further stipulate that the rows of 
the "e matrix" be orthogonal, 

d 

^e* aa e ba = (s a ,e b ) = d 5 ab , (31) 

i.e., that the scaled matrix e/Vd be unitary, 

d-Ve - I. (32) 

In consequence, the operators form an orthonormal 
set (with the exception of the redundant identities Uf), 
that is, 

Tr(U^U b B ) = J2 <*ebpTr(P£P*) = d S AB 8 ab , (33) 

a,/3 

where Eqs. 28 and 31 are used if A = B, and Eqs. 29 
and ^2 e aa — (for a ^ d) are used otherwise. Equation 
33 shows that the d 2 — 1 traceless operators, together 
with the identity, form a complete and orthonormal set. 
The partitioning property is guaranteed by Eq. 30, which 
implies commutativity within subsets (A). 

The converse of the above theorem may be demon- 
strated immediately. Assume that a complete and or- 
thonormal set of operators U£ exists with the partition- 
ing property. Append the identity to each maximally 
commuting subset and apply the inverse of the transfor- 
mation defined by Eq. 30, exploiting Eq. 32: 



Pa=dr 1 '£ e * aa u^ (34) 

a=l 

The required properties (Eqs. 28 and 29) are easily ver- 
ified. Equation 34 is useful in Sections III and IV. 

As a final note, the operators U£ need not be unitary. 
One can choose the matrix s to have real entries making 
Ua Hermitean, for example. The matrix s/Vd must then 
be orthogonal to ensure orthonormality of the set {U^}. 

Appendix B 

In this appendix we prove the relationship between 
partitionings of the operator set {U^} and factorizations 
of the Pauli Group, {(\,uj,lo 2 ) x U^}. Simply stated, 
Any maximally commuting subset (say A) in the parti- 
tion corresponds to the identity element of a Pauli factor 
group. The other elements contain one and only one op- 
erator from every other MCS (B ^= A). The factor group 
is isomorphic to every MCS (plus the identity, and in 
triplicate). 

The following proof is given for N qutrits (Hilbert 
space dimension d = 3 N ), although clearly the theorem 
is more general. 

Consider the complete orthonormal set of unitary op- 
erators {U A } that partitions into maximally commuting 
subsets A = 1, d + 1, where a = 1, d — 1 denotes 
operators within each subset. The Pauli Group consists 
of these operators, plus the identity, all in triplicate (i.e., 
multiplied by the three phase factors u n ), and is thus of 
order 3d 2 = 3 • 9^. A subgroup T consists of any max- 
imally commuting subset (say A), plus the identity, in 
triplicate: 

f=(l,u;,u; 2 )(Uf,...,U d A ), (35) 

where Uf = I. The inclusion of the phase factors makes 
T an invariant subgroup which, consisting of 3d elements, 
defines a factor group of order d. All of the factor group 
elements are generated by the multiplication 

T b = U^T, (36) 

with fixed B ^ A and b = l,...,d, the last entry repre- 
ducing the identity element Ta = T . The product rule 
of these T b is identical to that of the U b B themselves, 
modulo u) n , 

T b T c = U^TU^T = U^U^T, (37) 

showing that indeed they form a factor group as adver- 
tised. 

To prove the theorem stated above, notice that every 
T b (b 7^ d) contains a distinct operator in B, each in 
triplicate. But there are d choices of B (B ^ A), ev- 
ery one of which must generate the same factor group 
elements. Therefore every T b (b ^ d) must contain a 
distinct operator from every maximally commuting sub- 
set other than A, each in triplicate. This accounts for 
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the full constituency (3d) of each Tb, so the theorem is 
proved. 
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